SafeMode - Analysis: dappconnecthub.pages.dev

Captura Visual

Información de Detección

https://dappconnecthub.pages.dev/

Detected Brand

Unknown

Country

International

Confianza

100%

HTTP Status

200

Report ID

ac36e6e5-c32…

Analyzed

2026-02-18 03:07

Hashes de Contenido (Similitud HTML)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T11A321360F0B4AB3B51E3D5E2B771376A5D9FC22AC46BD402BEE5C28B4BC9D10CD09256
CONTENT ssdeep	192:be6sjqspTvsNdcXACAi/L9/7gCY6kRzVVBsnH:ZRATvsLcXACAi/L9/7TY6kRzVXSH

Hashes Visuales (Similitud de Captura)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	c98c36b1cccdc1b6
VISUAL aHash	ff04787878781818
VISUAL dHash	f278f2d2c2d2d2f0
VISUAL wHash	ff38787878781838
VISUAL colorHash	000010001c0
VISUAL cropResistant	6b695332ada6f5b5,f278f2d2c2d2d2f0

Análisis de Código

Risk Score 76/100

Nivel de Amenaza ALTO

⚠️ Phishing Confirmed

🎣 Credential Harvester 🎣 OTP Stealer 🎣 Banking

🔬 Threat Analysis Report

• Amenaza: Phishing
• Objetivo: Usuarios de billeteras cripto
• Método: Impersonación de la interfaz de una billetera.
• Exfil: Desconocido (probablemente información de la billetera)
• Indicadores: Hosting gratuito, imitación de la interfaz de la billetera, javascript ofuscado
• Riesgo: ALTO

🔒 Obfuscation Detected

fromCharCode
base64_strings

🎯 Kit Endpoints

https://dappconnecthub.pages.dev/api/exfiltrate

📊 Desglose de Puntuación de Riesgo

Total Risk Score

90/100

Contributing Factors

Free Hosting + Brand Impersonation

The site uses free hosting and presents itself as a cryptocurrency wallet with a UI, indicating phishing.

Obfuscated Javascript

Obfuscation is used, meaning malicious activity is possible.

🔬 Análisis Integral de Amenazas

Tipo de Amenaza

Banking Credential Harvester

Objetivo

General public

Método de Ataque

Brand impersonation + obfuscated JavaScript

Canal de Exfiltración

Unknown

Evaluación de Riesgo

HIGH - Automated credential harvesting with Unknown

⚠️ Indicators of Compromise

Kit types: Credential Harvester, OTP Stealer, Banking
351 obfuscation techniques

🏢 Análisis de Suplantación de Marca

Impersonated Brand

Crypto Wallet - Generic

Fake Service

Wallet Syncing/Management

Fraudulent Claims

⚔️ Metodología de Ataque

Primary Method: Wallet Phishing

The site attempts to steal a user's wallet credentials or seed phrase.

🌐 Indicadores de Compromiso de Infraestructura

🦠 Malicious Files

Main File

index-3a7670c9.js

File Size

Functions: sendData, submitForm

📊 Diagrama de Flujo de Ataque

User fills <input name='username'> → sendData() → fetch('https://dappconnecthub.pages.dev/api/exfiltrate') → Data sent to remote server

🔬 JavaScript Deep Analysis

Operator Language

English (1%)

Sophistication Level

Basic

Total Code Size

398,6 KB

🔗 API Endpoints Detected

Other

216

🔐 Obfuscation Detected

: Moderate

🤖 AI-Extracted Threat Intelligence

📊 Attack Flow

User fills <input name='username'> → sendData() → fetch('https://dappconnecthub.pages.dev/api/exfiltrate') → Data sent to remote server

🎯 Malicious Files Identified

Main Drainer

index-3a7670c9.js

File Size

45KB

Malicious Functions

sendData
submitForm

Similar Websites

Pages with identical visual appearance (based on perceptual hash)

Desconocido

https://nodesyncapp.pages.dev/

Ago 08, 2026

WalletConnect

https://project-dapp.vercel.app/

May 03, 2026

Desconocido

http://project-dapp.vercel.app

May 02, 2026

No screenshot

Desconocido

https://dappconnecthub.pages.dev/

Feb 19, 2026

Scan History for dappconnecthub.pages.dev

Found 1 other scan for this domain

https://dappconnecthub.pages.dev/ ? Feb 19, 2026 17:19